RE: [FW1] IPSO 3.3 & Multiple IP Address per NIC.

2001-04-09 Thread Jarmoc, Jeff
So I've learned. That sucks, it's causing a lot of trouble for me. Does anyone know why they did this? I can't think of any security reasons. https://support.nokia.com/knowledge/frmResolutionView.jsp?ResolutionId=4625 -Original Message- From: David Goode [mailto:[EMAIL PROTECTED]]

RE: [FW1] IPSO 3.3 & Multiple IP Address per NIC.

2001-04-09 Thread Fowler, Gary
As a rule, it is a bad idea to assign multiple addresses to a single interface on a box running Checkpoint. If you must, then do it through the host OS's proxy arp facility. Nokia: Voyager has an ARP configuration page with a Proxy Arp option. NT: Utilize Checkpoints local.arp file

[FW1] Hybrid Mode IKE

2001-04-09 Thread Lenny Sanchez
Trying to set-up hybrid mode IKE. want to create internal certs. When on my management station, inside of $FWDIR\bin (winnt\fw1\4.1\bin), I try to run an "fw internalca create -dn etc..." command, it doesn't recognize this command, and gives me the list of fw command I can run. Am I doing som

[FW1] Re: fw-1-mailinglist-digest V1 #1

2001-04-09 Thread Warren D. Coger
I will be out of the office until Monday, April16th. Please refer all networking issues to Jeff Campbell at 336-4576. Please refer all Internet issues to the helpdesk. Thanks. Warren To unsubscribe from t

RE: [FW1] How to merge objects, users and rules

2001-04-09 Thread Lars Troen
Jesus, 1. http://www.phoneboy.com/faq/0149.html 2. Just copy the .W files into the conf dir of the NT machine. 3. Export & Import user databases (http://www.hp-ux.com/security/checkpoint/command4.htm#757) 4. Build rulebases.fws. (http://www.phoneboy.com/faq/0136.html) Good luck! Lars -Orig

[FW1] Inbound, Outbound, Eitherbound

2001-04-09 Thread Tim Parker
I am looking for some real world experience to help me answer this question. We are currently having licensing issues (this is due to the way that we set up our BigIP boxes behind our FW, long story) But what is happening is that our FW is seeing external addresses on one of the internal interfac

RE: [FW1] Where is the packet evaluated?

2001-04-09 Thread Reed Mohn, Anders
Thanks, everyone. Though I got various answers, I guess it's the "it's evaluated once only, as outbound" that holds. (Makes the most sense to me, anyway.) Cheers, Anders :) On Thu, 05 Apr 2001, Reed Mohn, Anders wrote: > If a packet originates on one FW NIC, and > has as destination a host

Fwd: Re: [FW1] Quick MEP question

2001-04-09 Thread Richard Turner
The firewalls are separately licensed modules managed by the same management module. Internal meaning managed by your management server. So its a bit more than just ticking the "internal" button as the gui will attempt to install your security policies on all internal firewalls. You start by sayi

RE: [FW1] 4.0 vs. 4.1 - no license for user interface error

2001-04-09 Thread Dan Guinn
What kind of license do you have? There are some that are for the modules only, not the GUI. -Original Message- From: John Tanouye [mailto:[EMAIL PROTECTED]] Sent: Friday, April 06, 2001 2:50 PM To: '[EMAIL PROTECTED]' Subject: [FW1] 4.0 vs. 4.1 - no license for user interface error